Route Origin Authorization

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a333a3a2f34382d313238203d3e20323035383438.roa
File:                     326130363a313238323a333a3a2f34382d313238203d3e20323035383438.roa (raw, json)
Hash identifier:          mgJj3LmKTg+94aq7GLfcCnzX+2NqOAFtXpTLIgxtQco=
Subject key identifier:   DA:56:83:67:5B:4E:85:39:E1:48:1A:35:B6:19:7F:FF:A8:B8:A4:6B
Certificate issuer:       /CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
Certificate serial:       65D9B769627D551F28D076C952A2B457A9C98ABA
Authority key identifier: 8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a333a3a2f34382d313238203d3e20323035383438.roa
Signing time:             Thu 03 Jul 2025 15:52:56 +0000
ROA not before:           Thu 03 Jul 2025 15:47:56 +0000
ROA not after:            Thu 02 Jul 2026 15:52:56 +0000
asID:                     205848
IP address blocks:        2a06:1282:3::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d9:b7:69:62:7d:55:1f:28:d0:76:c9:52:a2:b4:57:a9:c9:8a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
        Validity
            Not Before: Jul  3 15:47:56 2025 GMT
            Not After : Jul  2 15:52:56 2026 GMT
        Subject: CN=DA5683675B4E8539E1481A35B6197FFFA8B8A46B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:40:32:b0:31:a7:bb:d0:8e:ed:63:14:52:91:
                    bf:e2:fb:5b:73:b5:90:b9:38:7a:b3:b4:be:da:cd:
                    5b:0b:32:9c:9c:a1:27:c8:08:26:56:c5:06:d0:81:
                    00:24:12:e8:6d:e6:19:df:66:50:89:77:48:48:1e:
                    53:ae:ef:fc:80:65:06:48:1c:78:0b:ae:39:11:0a:
                    82:91:2e:9b:8f:86:22:c5:3a:38:cb:ae:54:8b:c2:
                    55:85:6a:c3:3e:92:6c:27:05:69:6f:f0:d3:25:5e:
                    cb:9e:2a:18:b5:be:a1:dc:aa:17:d9:1e:be:41:2a:
                    51:ec:57:5e:0e:7e:5f:3d:c6:f4:91:22:65:9a:a2:
                    be:f4:bb:0e:7f:75:22:7b:bc:b3:e9:cd:b8:da:ae:
                    1a:63:1d:d3:31:09:17:c1:de:a9:fa:bb:4d:b3:b6:
                    5b:41:f8:11:a3:79:36:a6:a3:c3:5a:10:85:53:93:
                    f5:84:ea:d2:6a:00:68:48:a7:d2:57:86:2d:e3:87:
                    9e:1f:09:2e:05:68:44:b0:35:9d:8b:f0:d5:e0:f1:
                    d2:c5:ff:61:72:ab:04:af:bc:3e:0d:d3:71:1f:de:
                    f7:fc:24:56:5f:c9:fc:7a:63:93:f3:bb:1b:2a:29:
                    c5:5a:45:f5:4a:bd:6d:d9:d8:f2:fb:73:d7:66:01:
                    a6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:56:83:67:5B:4E:85:39:E1:48:1A:35:B6:19:7F:FF:A8:B8:A4:6B
            X509v3 Authority Key Identifier:
                keyid:8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a333a3a2f34382d313238203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1282:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:91:18:fd:fa:8b:cc:70:ac:63:99:55:55:47:91:8a:17:ad:
         4d:47:fc:29:62:22:5b:13:fa:f1:fe:fa:7a:ff:95:7a:9f:c9:
         f7:d8:cf:01:26:83:b7:74:89:ce:73:5c:5a:10:81:29:82:bf:
         ba:5e:ab:02:4b:39:3b:d0:1d:06:01:a5:d5:f4:1a:82:27:61:
         f0:d5:78:28:d0:4c:b3:3d:cd:2b:9f:4a:1d:ec:80:79:eb:f5:
         0e:aa:5c:4c:39:e1:e1:d6:fe:6b:d5:b5:73:88:9e:2c:2c:fc:
         cb:f9:d4:ce:e2:43:c3:26:b3:e2:a2:82:72:31:af:9a:66:ae:
         8e:7e:18:4d:41:1e:45:88:79:d9:36:03:35:15:03:f2:d8:74:
         1e:48:fe:b3:04:b5:11:8f:a5:8d:19:b7:d4:1d:c3:c6:ae:5f:
         ab:c3:73:be:ba:39:91:98:33:d1:ac:37:47:9b:12:b6:59:84:
         b5:31:44:98:61:22:9a:5b:6d:87:ee:ae:ce:b8:6b:a3:83:61:
         00:bd:4a:f7:55:34:31:be:ef:1b:f1:ae:6e:8e:41:66:fb:9b:
         ce:1e:9e:2e:35:d7:2c:77:26:ae:c3:fa:25:d1:76:c2:63:b7:
         20:66:51:1b:ef:1e:82:d9:45:71:13:e4:89:9e:3b:f2:29:f8:
         17:2b:80:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:42:53 2025 by rpki-client